<p>Pair of researchers chain WAF bypasses and default logins to command vehicles in Australia and the US</p>